- Zope - Zope lists

Re: [Zope] system calls
by Dieter Maurer 09 Mar '01

09 Mar '01

Arenz, Ralph writes: > i' am using external methods in zope and in this external methods (python > module(s)) > i try to do a system call via the module os. > .... > Is there a way to grant a permission to Zope (External Method Product) to > allow system calls ?? As you already heard, you are not restricted by Zope security in ExternalMethods. Did you start Zope as "root"? In this case, it will switch to the user specified at installation immediately after it had bound the ports. If you did not specify anything, it will switch to the user "nobody". Maybe, the user switched to does not have permissions to access the external files. Dieter

1 0

Re: [Zope] Add python class to Zope.
by Dieter Maurer 09 Mar '01

09 Mar '01

karthick ramanarayanan writes: > <dtml-in objectList mapping> > <dtml-var objectMethod> > </dtml-in> > Can I call objectMethod on each of the objects.It popped up the Authentication Window when I tried to access the object method with mapping,but the other object attributes are accessible. "Authentication Window popping up" suggests that reading Brian's Zope security paper (-> zope.org) may help. Reading URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html may help you to understand when/why you use "mapping" as attribute for "dtml-in" or "dtml-with". Dieter

1 0

Re: [Zope] Update URL in SQL
by Dieter Maurer 09 Mar '01

09 Mar '01

helmjan(a)hotmail.com writes: > I have a database which has information about books, and there should > be link to the publishers website. > .... > SQL code: > UPDATE info SET name="<dtml-var name>", > description="<dtml-var description>", > url="<dtml-var url>", > publisher="<dtml-var publisher>", > update="<dtml-var update>" > WHERE id = <dtml-var id> > > input url: > <a href="http://www.bookpress.com">Book Press</a> Try: UPDATE .... url='<dtml-var url sql_quote>' .... Note the change in string delimiters and the addition of "sql_quote". Dieter

1 0

Re: [Zope] probably stupid: changing zstylesheet properties through dtml
by Dieter Maurer 09 Mar '01

09 Mar '01

Danny William Adair writes: > How can I programmatically change A ZStyleSheet attribute (ZSSAttr) through > dtml??? Can you do what you want via the Management Interface? If so, look at its source. Almost surely, it is DTML source. More info: URL:http://www.dieter.handshake.de/pyprojects/zope/book/chap3.html Dieter

1 0

Re: [Zope] container has no security assertions ?!?!
by Dieter Maurer 09 Mar '01

09 Mar '01

Loren Stafford writes: > > When I try to access the mime type of an uploaded file .... > > > <dtml-boundary type_expr="CVfile.headers.headers[1]" > name_expr="CVfile.filename()" > disposition=attachment encode=base64> > > I get this exception... > > An exception occurred in a DTML method or document. > > Error type: Unauthorized > Error value: Access denied for ['Content-Disposition: form-data; > name="CVfile:file"; filename="D:\\Arrivals\\Glossary.doc"\015\012', > 'Content-Type: application/msword\015\012'] because its container, > <rfc822.Message instance at 20112e0>, has no security assertions. > > > What does this mean? What am I doing wrong? It means that you hit a place where the security restrictions introduced in Zope 2.2 have not yet been taken care of. You will find information on how to fix this problem in Brian's Zope security paper (-> zope.org) Put the problem in the Collector. Dieter

1 0

Acquisition Problem ?
by Richard Moon 09 Mar '01

09 Mar '01

Can anyone explain what's going on here - please ? I've got a dtml method 'mydtml_1' which processes a file uploaded via a form - like this <dtml-in "abcfile_read(REQUEST)"> <dtml-let abc_text=sequence-item> <dtml-unless "_.len(abc_text)==0"> <dtml-var mydtml_2> </dtml-unless> </dtml-let> </dtml-in> In the dtml method mydtml_2 I have some code like this <dtml-var expr="REQUEST.set('abc_text',external_method_that_returns_hello_world(abc_text))> <dtml-var REQUEST> <dtml-var abc_text> What happens is that the <dtml-var REQUEST> shows abc_text having the new value of "Hello World" but the <dtml-var abc_text> shows the value as it was in mydtml_1 Presumably <dtml-var abc_text> is acquiring the value from mydtml_1. Can anyone tell me why ? And how to get <dtml-var abc_text> to return the value I want i.e. "Hello World" ? This is Zope 2.2.1 (Note - if I do not put <dtml-var mydtml_2> inside the <dtml-in> and <dtml-let> constructs then it works as expected, e.g. <dtml-call "REQUEST.set('abc_text','Goodbye Forever')"> <dtml-var mydtml_2> will render "Hello World" ) Many thanks Richard Moon richard(a)dcs.co.uk

2 1

the big news?
by Bak ＠ kedai 09 Mar '01

09 Mar '01

guys earlier this week(or was it last week), michel said something about announcing something at ipc9. has anything been announced yet?

3 3

RE: [Zope] Acquisition Problem ?
by Farrell, Troy 09 Mar '01

09 Mar '01

You have an instance of variable-clobbering. abc_text is acquired from the dtml-let inside mydtml_1. You have set the value in REQUEST, but REQUEST is at the bottom of the list when variable names are looked up. This is explained on page 15 of the Document Template Markup Language Reference. Unfortunately, I can't find a link for it. Ok, I found it in the Zope Book http://www.zope.org/Members/michel/ZB/AdvDTML.dtml First section. Troy -----Original Message----- From: Richard Moon [mailto:richard@dcs.co.uk] Sent: Friday, March 09, 2001 12:56 PM To: zope(a)zope.org Subject: [Zope] Acquisition Problem ? Can anyone explain what's going on here - please ? I've got a dtml method 'mydtml_1' which processes a file uploaded via a form - like this <dtml-in "abcfile_read(REQUEST)"> <dtml-let abc_text=sequence-item> <dtml-unless "_.len(abc_text)==0"> <dtml-var mydtml_2> </dtml-unless> </dtml-let> </dtml-in> In the dtml method mydtml_2 I have some code like this <dtml-var expr="REQUEST.set('abc_text',external_method_that_returns_hello_world(abc_te xt))> <dtml-var REQUEST> <dtml-var abc_text> What happens is that the <dtml-var REQUEST> shows abc_text having the new value of "Hello World" but the <dtml-var abc_text> shows the value as it was in mydtml_1 Presumably <dtml-var abc_text> is acquiring the value from mydtml_1. Can anyone tell me why ? And how to get <dtml-var abc_text> to return the value I want i.e. "Hello World" ? This is Zope 2.2.1 (Note - if I do not put <dtml-var mydtml_2> inside the <dtml-in> and <dtml-let> constructs then it works as expected, e.g. <dtml-call "REQUEST.set('abc_text','Goodbye Forever')"> <dtml-var mydtml_2> will render "Hello World" ) Many thanks Richard Moon richard(a)dcs.co.uk _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

Re: [Zope] Add python class to Zope.
by Dieter Maurer 09 Mar '01

09 Mar '01

Pattreeya Tanisaro writes: > I found some python sources which declared "class" inside. > I tried to call the function inside this class with external method and > python script but it didn't work out. > > class Guestbook: > def __init__ > .... > def signGuestBook > .... > def feedBack. > .. > How can I call the function "feedBack" to Zope? Read the paper on Zope Security. Otherwise, you will not be lucky. You would not call the function directly from Zope, but as a method of an instance "gb" of "Guestbook". Once you have such an instance, you would use <dtml-with gb> <dtml-var feedback> </dtml-with> Note that function definitions in Python have parameter declaration. It's probably advicable to look into a Python book or its online documentation, too. ... before you start your project. Probably, you should also read the Zope book... Dieter

3 3

RE: [Zope] Telnet to Port 8080
by Farrell, Troy 09 Mar '01

09 Mar '01

CURL (http://curl.haxx.se/) is helpful if you need to upload files through a form. I use bash scripts with curl to import files. Troy -----Original Message----- From: Joel Burton [mailto:jburton@scw.org] Sent: Friday, March 09, 2001 8:16 AM To: Tino Wildenhain Cc: zope(a)zope.org Subject: Re: [Zope] Telnet to Port 8080 On Fri, 9 Mar 2001, Tino Wildenhain wrote: > Hi Karthick, > > you will the specification how to encode authentication information > in rfc2616 (www.faqs.org) > Basically is a base64 encoded string consisting of username:password For simplicity's sake, you might want to consider using a tool like wget, which will let you pass the auth info as a command line switch... it's less tedious than doing the telnetting yourself. _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

2 1